Privacy Policy

We collect personal information only when it is necessary to provide our services. This includes:

• Contact and identity information — your name, business name (if applicable), and email address, provided when you purchase a pixel placement.
• Payment information — we do not store your card details. Payments are processed securely by Stripe. We receive a confirmation of payment and a transaction reference only.
• Content you upload — the image or artwork you submit for display on the wall, along with the destination URL and placement title you provide.
• Usage information — anonymised click and impression counts for placements. We do not collect individual visitor identities.
• Technical information — standard server logs (IP address, browser type, request timestamps). These are used for security and are not linked to your identity.

We do not collect sensitive information as defined by the Privacy Act (such as health, racial, or financial information beyond what is required to process your payment).

We use the personal information we collect to:

• process your purchase and create your pixel placement;
• send you an order confirmation and any operational updates about your placement (approval, rejection, or content issues);
• moderate submitted content to ensure it complies with our content standards;
• respond to your enquiries;
• comply with legal obligations, including fraud prevention and tax record-keeping; and
• improve the Platform (aggregated and anonymised only).

We will not use your information for unrelated direct marketing without your consent.

We share your personal information only where necessary:

• Stripe — our payment processor. Stripe handles your payment details and is subject to its own privacy policy and PCI-DSS compliance. See stripe.com/au/privacy.
• Resend — our transactional email provider, used to send order confirmations. Email content is limited to your name, order reference, and placement details.
• Hosting infrastructure — the Platform is hosted on Railway, with data stored in servers within AWS regions. Railway’s infrastructure is subject to standard cloud provider data processing agreements.
• Legal requirements — we may disclose information where required by law, court order, or to protect the rights, property, or safety of our users or the public.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

By purchasing a placement, you understand and agree that:

• Your placement title and uploaded image are displayed publicly on the Weirdest Billboard wall, visible to anyone who visits the Platform.
• Your business name (if provided) may be displayed on the hover card for your placement.
• Your email address is never displayed publicly.
• Aggregated statistics (clicks, impressions) for your placement are displayed publicly on the leaderboard and on your placement’s hover card.

We retain your personal information for as long as it is necessary for the purposes set out in this policy:

• Active placements — buyer contact information and placement content are retained for the life of the placement on the wall.
• Payment records — transaction records are retained for 7 years to comply with Australian tax law.
• Rejected submissions — rejected content and associated buyer information are deleted within 90 days of rejection.
• Server logs — retained for up to 30 days for security purposes.

We implement reasonable technical and organisational measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction. These include:

• HTTPS encryption for all data in transit;
• access controls limiting admin access to authorised personnel only;
• use of reputable third-party infrastructure with industry-standard security practices.

No method of transmission over the internet is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

Under the Australian Privacy Principles, you have the right to:

• Access — request a copy of the personal information we hold about you;
• Correction — ask us to correct information that is inaccurate, incomplete, or out of date;
• Complaint — lodge a complaint with us if you believe we have breached your privacy.

To exercise any of these rights, contact us at hello@weirdestbillboard.com. We will respond within 30 days. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

The Platform uses session cookies strictly necessary for the checkout flow to function. We do not use third-party advertising cookies or cross-site tracking. No cookie consent banner is required for strictly necessary cookies under Australian law.

Each placement on the wall links to a destination URL chosen by the buyer. We are not responsible for the privacy practices of those external websites. We moderate destination URLs to block private IP addresses and non-HTTP protocols, but we cannot control third-party privacy policies.

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. Continued use of the Platform after changes are posted constitutes acceptance of the updated policy. For significant changes, we will notify active buyers by email.

For any privacy-related questions, access requests, or complaints:

Weirdest Billboard
Australia
Email: hello@weirdestbillboard.com